Privacy Policy

Privacy Policy

Last updated July 11, 2026

This Privacy Policy explains how Sporting (“we,” “us,” or “our”) collects, uses, and shares information about you when you use our website, installable app (PWA), and related services (the “Service”). By using the Service, you agree to this Policy.

Sporting is a social sports application designed to span multiple sports (starting with baseball). It combines live scores and statistics with a social network, fantasy games played with an in-app virtual currency (“Caps”), and AI-generated coverage.

Information We Collect

Information you provide

  • Account information — your email address, username, and password (or an email code, passkey, or Google sign-in in place of a password) when you create or access an account.
  • Profile information — display name, avatar, bio, favorite team and players, and anything else you add. Some details, such as your username and favorite team, are public.
  • Content you create — posts, replies, reposts, quotes, comments, poll and quiz responses, club activity, watched-game entries, direct messages, and reports you submit.
  • Payment information — if you use paid brand/advertising features (Studio), payments are processed by Stripe. We do not store your full card details.

Information collected automatically

  • Usage and interaction data — content viewed, impressions, taps, and similar activity used to rank your feed, measure engagement, and improve the Service.
  • Device and technical data — browser type, device and operating system information, and general diagnostic data.
  • Push notification tokens — if you opt in to push, we store the device subscription needed to deliver notifications.
  • Cookies and local storage — used to keep you signed in, remember preferences, attribute referrals, and operate security features.

How We Use Information

  • To provide, operate, and maintain the Service and your account.
  • To display and rank content, personalize your feed, and power features like fantasy, Caps, and profiles.
  • To deliver notifications you have enabled.
  • To keep the Service secure — detecting and preventing spam, abuse, bots, and fraud.
  • To moderate content and enforce our Terms of Use.
  • To measure engagement and improve features.
  • To communicate with you about the Service, including account and security notices.
  • To comply with legal obligations.

Service Providers & Third Parties

We rely on trusted third parties to run the Service. Each processes data under its own privacy policy:

  • Supabase — database, authentication, and realtime infrastructure that stores your account and content.
  • Vercel — application hosting and delivery.
  • Cloudflare Turnstile — bot protection on sign-in and sign-up (see the next section).
  • Stripe — payment processing for paid brand/advertising features.
  • Google — optional “Sign in with Google” authentication.
  • Vercel AI Gateway — powers AI features such as game highlights, reporter bots, and AI search, with zero-data-retention handling; your data is not used to train third-party models.
  • Sports data providers (such as the MLB Stats API) — sources of scores and statistics (public sports data, not your personal data).

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect our sign-in and sign-up flows from automated abuse by distinguishing humans from bots. When you interact with Turnstile, Cloudflare processes client-side signals such as your IP address, TLS fingerprint, User-Agent header, and the site key and its origin.

Cloudflare states it cannot directly identify individuals from these signals, and that they are used solely to detect and block bot traffic — not to profile or target individuals. In providing this service to us, Cloudflare acts as our data processor; it also acts as a data controller when it uses these signals to improve Turnstile’s bot detection. For details, see Cloudflare’s Privacy Policy and Turnstile Privacy Addendum, or contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.

AI-Generated Content

Some content on the Service — including game highlights, reporter-bot posts, and AI search answers — is generated by AI using real MLB data, through the Vercel AI Gateway. We do not use your private messages to train AI models.

Cookies & Local Storage

We use cookies and browser storage that are necessary to:

  • keep you signed in and maintain your session;
  • remember preferences such as your theme;
  • attribute how you arrived at the Service (referral / UTM); and
  • operate security tools including Turnstile.

You can control cookies in your browser settings, but disabling essential cookies may break sign-in and other features.

Public & Shared Information

Content you post publicly — including posts, replies, comments, club activity, watched games, your username, and public profile details — is visible to others and may be seen by signed-out visitors. Direct messages are private between participants but may be reviewed if reported for a Terms of Use violation.

Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information, except where we must retain it for legal, security, or fraud-prevention purposes. Some content may persist in others’ interactions (for example, a reply that quotes a deleted post).

Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update much of your information directly in the app, or contact us to make a request. We will not discriminate against you for exercising these rights.

Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, please contact us and we will delete it.

Security

We use industry-standard measures to protect your information, including encryption in transit, row-level security on our database, and bot and abuse protection. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International Users

We operate the Service from, and store data in, facilities that may be located outside your country. By using the Service, you consent to the transfer and processing of your information in those locations.

Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Contact Us

Questions about this Policy or your information? Contact us at privacy@sportingcc.com.